Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/Azr6ZZ_U5ivXhRuFQg8VmVkygfg.roa
File:                     Azr6ZZ_U5ivXhRuFQg8VmVkygfg.roa (raw, json)
Hash identifier:          PsSHUflumKKiJp0+8deXJdsjMHlog5kUuTkSohRWPsE=
Subject key identifier:   03:3A:FA:65:9F:D4:E6:2B:D7:85:1B:85:42:0F:15:99:59:32:81:F8
Certificate issuer:       /CN=FB734FF1688B7D1F34A34500C9B39F47116FE104
Certificate serial:       27
Authority key identifier: FB:73:4F:F1:68:8B:7D:1F:34:A3:45:00:C9:B3:9F:47:11:6F:E1:04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3NP8WiLfR80o0UAybOfRxFv4QQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/Azr6ZZ_U5ivXhRuFQg8VmVkygfg.roa
Signing time:             Wed 01 Feb 2023 01:29:36 +0000
ROA not before:           Wed 01 Feb 2023 01:29:36 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     10011
IP address blocks:        24.41.112.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB734FF1688B7D1F34A34500C9B39F47116FE104
        Validity
            Not Before: Feb  1 01:29:36 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=033AFA659FD4E62BD7851B85420F1599593281F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:ba:df:bf:e8:1a:6d:d7:fa:a7:3c:bf:7e:
                    f3:b9:71:73:b8:c4:d7:0c:ab:d2:ea:de:95:e2:a8:
                    5d:6a:37:e4:6d:c2:47:8b:d2:5e:96:a9:e6:64:9d:
                    b5:ed:36:a0:63:88:ff:49:f7:a3:8d:cc:59:a1:c6:
                    73:50:e2:23:0f:4e:6b:24:1e:09:7d:c5:78:b8:6d:
                    d2:56:81:2c:2c:2e:c5:bd:e8:55:ac:20:e9:b2:0e:
                    67:96:b7:c4:93:42:c6:30:29:14:a9:ec:f8:18:23:
                    23:c9:e0:04:e2:13:09:19:1b:11:ad:b9:a3:fc:a5:
                    e6:df:04:b9:00:3c:8b:d2:8a:07:d6:5c:de:bf:97:
                    b0:6e:2f:c9:7d:4f:99:21:67:eb:b0:49:1a:eb:9b:
                    cb:05:a5:87:1e:f0:66:78:60:c4:c1:e2:e5:9d:61:
                    43:c5:ba:e8:14:69:84:05:38:b2:4e:52:9c:dc:2f:
                    f3:68:2d:93:be:80:c6:34:49:a1:34:da:a4:1f:ac:
                    c1:15:07:9e:c0:bc:dd:86:0c:04:63:e0:6e:65:ce:
                    5d:97:08:e8:32:be:02:44:a5:65:84:85:1c:d0:8b:
                    48:61:69:ea:c3:65:b9:e9:95:94:5b:5d:25:d9:32:
                    98:d6:33:00:2a:14:e4:d0:8a:b6:6d:10:c8:55:b2:
                    f0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3A:FA:65:9F:D4:E6:2B:D7:85:1B:85:42:0F:15:99:59:32:81:F8
            X509v3 Authority Key Identifier:
                keyid:FB:73:4F:F1:68:8B:7D:1F:34:A3:45:00:C9:B3:9F:47:11:6F:E1:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/-3NP8WiLfR80o0UAybOfRxFv4QQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3NP8WiLfR80o0UAybOfRxFv4QQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/Azr6ZZ_U5ivXhRuFQg8VmVkygfg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.41.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:4c:0d:3d:7a:bf:60:5c:e2:ad:60:d8:3c:5e:8e:92:0f:c3:
         60:cd:bc:54:ec:c0:c8:ec:4b:d7:ca:ba:c1:bc:21:7d:58:a4:
         51:61:8b:77:03:9a:1a:98:f4:1a:24:8e:5e:e0:9a:62:65:00:
         5f:0e:d0:a0:52:e2:c9:8a:0b:88:dd:c0:86:82:f2:00:8b:ea:
         8c:de:58:36:d9:57:a4:68:92:c2:90:82:f9:11:b7:d4:cf:d2:
         b5:dc:69:8b:51:04:33:b7:be:6f:a7:24:b2:b0:1b:ca:2b:61:
         3c:12:8e:02:6d:68:ed:bc:ca:35:41:e0:13:1a:b1:58:97:61:
         e0:c4:32:ec:6e:89:e7:ae:54:31:11:49:4b:a6:ed:c8:1d:7c:
         56:77:52:0e:c6:dd:b3:fc:8d:94:f3:68:74:2d:33:4a:f3:9b:
         21:22:e4:ad:06:aa:a6:cc:d1:f5:d9:68:67:17:73:1e:69:93:
         e3:2f:f4:66:a4:8c:76:20:b1:f2:39:ae:3f:97:f8:8f:31:f2:
         08:3d:d0:de:53:60:08:d3:f7:79:3f:1d:11:e6:fb:49:a1:a0:
         49:c2:f8:25:c9:2e:af:e5:ea:e7:9d:41:c2:e7:67:d9:88:16:
         0a:98:ba:88:33:0f:f3:44:78:a9:d8:46:c4:75:f5:0b:e4:ac:
         f0:8e:ec:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org